Here is a case where a message was NOT DELIVERED to either user because one user had it blocked (weight10=HOLD). Even though the second recipient has only IGNORE for all tests and the log file has "L2 Message OK," the message was not delivered but moved to the spam folder instead.
01/21/2004 18:25:50 Q188610910132b08a WAMCHECK:100 MYFILTERPASS:-9 SPFFAIL:3 . Total weight = 94. 01/21/2004 18:25:50 Q188610910132b08a Subject: This is spam 01/21/2004 18:25:50 Q188610910132b08a From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 63.252.12.191 ID: 01/21/2004 18:25:50 Q188610910132b08a Tests failed [weight=94]: WAMCHECK=IGNORE MYFILTERPASS=IGNORE SPFFAIL=IGNORE WEIGHT10=HOLD WEIGHT15=IGNORE WEIGHT20=IGNORE 01/21/2004 18:25:50 Q188610910132b08a L2 Message OK 01/21/2004 18:25:50 Q188610910132b08a Subject: This is spam 01/21/2004 18:25:50 Q188610910132b08a From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] IP: 63.252.12.191 ID: 01/21/2004 18:25:50 Q188610910132b08a Tests failed [weight=94]: WAMCHECK=IGNORE MYFILTERPASS=IGNORE SPFFAIL=IGNORE WEIGHT10=IGNORE WEIGHT15=IGNORE WEIGHT20=IGNORE This is the Imail log (no reference to this message after the 4th line) 20040121 182542 127.0.0.1 SMTPD (10910132) [63.252.12.191] MAIL FROM: <[EMAIL PROTECTED]> 20040121 182542 127.0.0.1 SMTPD (10910132) [63.252.12.191] RCPT TO: <[EMAIL PROTECTED]> 20040121 182542 127.0.0.1 SMTPD (10910132) [63.252.12.191] RCPT TO: <[EMAIL PROTECTED]> 20040121 182543 127.0.0.1 SMTPD (10910132) [63.252.12.191] n:\inetpub\IMail\spool\D188610910132b08a.SMD 643 > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of R. > Scott Perry > Sent: Wednesday, January 21, 2004 5:59 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Unintended Multiple User Whitelisting > > > > >So if a message comes in for 50 users from say, > [EMAIL PROTECTED], and any > >one of those users has it whitelisted, everybody gets it > regardless of > >its failed tests? > > That is correct. That's how SMTP was designed. > > We did add a "bypasswhitelisting" option to help with this > (where if the > total weight and number of recipients is high enough, the > whitelisting will > be bypassed). But, the real question is why the E-mail from > [EMAIL PROTECTED] > was whitelisted -- that's why whitelisting, and especially > bypasswhitelisting, should be used as a last resort. > > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers. Declude Virus: Catches known viruses and is the > leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask about our free 30-day > evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
